Manifest
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
File: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft (raw, json)
Hash identifier: Z8ffkqtWwF8N5eXRJq7Y/VRNsQhrSOgS77zF97KZq+w=
Subject key identifier: D3:BA:57:82:58:4D:CE:D1:19:CF:E7:1B:F6:B1:EB:4E:DC:E6:1C:89
Authority key identifier: E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D
Certificate issuer: /CN=A91F2B47/serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D
Certificate serial: 01ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
Manifest number: 01E7
Signing time: Fri 31 Jan 2025 02:16:54 +0000
Manifest this update: Fri 31 Jan 2025 02:16:54 +0000
Manifest next update: Fri 07 Feb 2025 02:16:54 +0000
Files and hashes: 1: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl (hash: 7pO3XFhw/XrRNvNs9JfJ1pZTAKvalsHS3vXTR9NzaU8=)
2: 909F94F070F911EDBA42F056C4F9AE02.roa (hash: pVK0XdTrjBptKJEy8yW+YdDJrksJGkGUiYH7tSYKlBw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F2B47/serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D
Validity
Not Before: Jan 31 02:16:54 2025 GMT
Not After : Feb 7 02:16:54 2025 GMT
Subject: CN=679c3296-d105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6b:56:e2:d6:f1:a2:02:85:99:09:0a:a2:be:
7f:54:0c:eb:4d:22:1a:21:01:3d:5d:92:c0:72:eb:
a0:38:13:d4:52:52:dc:05:98:7d:bf:53:47:63:cb:
b1:bf:32:dc:27:c7:e0:a4:b0:ad:f9:08:4d:89:d4:
5e:75:59:27:af:12:be:50:8d:07:47:fc:a3:b0:74:
42:f4:ba:d4:09:70:23:95:f2:4b:e2:15:00:56:40:
61:cd:26:5e:b0:85:f2:f3:d0:0b:36:5b:7c:1d:4b:
be:d8:05:7b:a7:4e:e4:81:0b:6d:04:e7:80:03:6b:
6a:45:1d:3c:33:0f:0e:c4:b0:ec:9f:f5:00:70:59:
73:c8:d3:9c:7b:e4:b2:78:cf:ed:f1:64:14:19:c6:
50:c2:17:d5:fc:2f:c2:ab:8d:b9:a2:2c:fb:bb:8d:
a1:0e:8b:8b:43:d9:af:97:3d:a7:8d:f2:5b:6b:eb:
2d:58:4f:4e:77:74:24:c4:7b:32:c9:e8:96:35:dc:
a1:d5:c1:63:a0:5b:3f:1c:fc:0f:28:26:bf:bb:98:
67:9c:d2:80:15:06:f7:cd:c6:8b:29:99:fd:91:a5:
4f:19:2f:52:a0:ed:c8:41:d6:73:b8:48:40:8b:17:
40:a8:20:ce:64:4b:24:da:c6:26:b6:8a:43:31:a6:
50:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BA:57:82:58:4D:CE:D1:19:CF:E7:1B:F6:B1:EB:4E:DC:E6:1C:89
X509v3 Authority Key Identifier:
keyid:E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
de:c1:81:b8:7a:f8:64:9f:c5:b7:5a:43:38:f2:d7:80:cf:ff:
0b:d7:89:86:ee:70:ee:52:28:40:8b:81:87:f2:77:b8:f4:fc:
c7:c9:1e:7a:ad:24:3f:63:0d:b2:79:66:7a:4b:c0:d4:e1:28:
d9:79:0b:a3:95:ab:6e:f7:84:ce:ad:bd:76:6e:ad:fd:b7:a2:
b7:5b:3c:5a:c8:56:a7:92:fd:66:3d:b1:3d:ab:be:04:38:1d:
d2:3a:a1:d9:1e:02:f9:40:8f:24:10:ac:ee:ac:43:ce:8d:39:
82:78:db:dd:fc:11:fb:f8:88:b8:3e:be:06:19:24:c4:cc:5b:
cb:52:40:af:aa:68:92:8b:3a:39:a0:8c:2e:4d:b1:73:f8:29:
1a:1c:69:c6:45:ca:84:9f:0c:11:82:da:d0:ac:95:16:c2:97:
ea:ce:47:bf:2a:fa:b0:00:6a:9b:05:45:59:54:46:16:e6:c8:
d9:d9:10:8e:d9:2f:30:57:cb:1f:6b:dd:ce:75:31:0f:3a:9a:
87:42:98:14:57:4c:1a:d8:65:32:73:a7:66:62:4b:04:12:bf:
04:2e:5c:e9:eb:f3:0e:e6:63:15:e3:85:d9:d6:95:f3:38:0d:
e3:96:25:69:81:ad:9b:bf:98:52:89:38:19:9a:43:9f:85:6d:
25:23:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:11:23 2025 by rpki-client